CVE-2013-2801

The CVE concerns the OSIsoft PI Interface for IEEE C37.118 (pre-1.0.6.158). It can trigger an invalid read from memory when processing crafted C37.118 configuration packets, leading to a remote denial of service (instance shutdown and data-collection outage). Affected product: PI Interface for IE...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

PT-2013-3940

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface for IEEE C37.118 versions prior to 1.0.6.158 Description The issue allows remote attackers to cause a denial of service, resulting in instance shutdown and data-collection outage, via crafted C37.118 configuration packets...

CVE-2013-2800: Undefined Security Weakness

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

CVE-2013-2801: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

PT-2013-3939

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface for IEEE C37.118 versions prior to 1.0.6.158 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption or memory corruption, instance shutdown, and data-collection outage,...

OSIsoft Multiple Vulnerabilities

OVERVIEW OSIsoft has identified multiple vulnerabilities in the PI Interface for IEEE C37.118 and reported them to ICS-CERT. OSIsoft has produced a software update that mitigates these vulnerabilities. OSIsoft has tested the software update to validate that it resolves the vulnerabilities...

CVE-2012-3008

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

Stack overflow

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

CVE-2012-3008

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

CVE-2012-3008

The CVE-2012-3008 issue affects the OSIsoft PI OPC DA Interface (before 2.3.20.9). The vulnerability is a stack-based buffer overflow in the handling of OPC input messages, allowing a remote, authenticated attacker to execute arbitrary code on affected systems. Affected products are PI OPC DA Int...

PT-2012-4432

Name of the Vulnerable Software and Affected Versions OSIsoft PI OPC DA Interface versions prior to 2.3.20.9 Description The issue is related to a stack-based buffer overflow that allows remote authenticated users to execute arbitrary code. This is achieved by sending packet data during the...

CVE-2012-3008: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

OSIsoft PI OPC DA Interface Buffer Overflow

Overview ICS-CERT has received a report from OSIsoft concerning a stack-based buffer overflow in the PI OPC DA Interface software that could cause the software to crash or allow a remote attacker to execute arbitrary code. This vulnerability was discovered during a software assessment requested b...

OSIsoft PI Server provides an insecure authentication mechanism

Overview OSIsoft PI Server provides an insecure authentication mechanism that could allow attackers to read or modify information in databases. Description PI Server is a core component of the OSIsoft PI System.According to a report from C4 Security, OSISoft release notes login required for PI...

OSISoft PI Server weak authentication

No description provided...

C4 SCADA Security Advisory - OSISoft PI Server Authentication Weakness

Background ----------------- Vendor product information, from www.osisoft.com : The PI SystemT brings all operational data into a single system that can deliver it to users at all levels of the company - from the plant floor to the enterprise level. The PI System keeps business-critical data alwa...

Authentication flaw

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...